Page 3 - Contents
Contents 3 Contents ISCLI reference Introduction ........................................................................................................................................... 9 Additional references ..........................................................................................
Page 9 - Introduction; Additional references; Connecting to the switch
ISCLI reference 9 ISCLI reference Introduction The HP 10Gb Ethernet BL-c Switch is ready to perform basic switching functions right out of the box. Some of the more advanced features, however, require some administrative configuration before they can be used effectively. This guide provides a comman...
Page 10 - Establishing a console connection; Setting an IP address
ISCLI reference 10 Establishing a console connection To establish a console connection with the switch, you need: • A null modem cable with a female DB-9 connector (See the HP 10Gb Ethernet BL-c Switch User Guide for more information.) • An ASCII terminal or a computer running terminal emulation sof...
Page 11 - Establishing a Telnet connection; Establishing an SSH connection
ISCLI reference 11 Establishing a Telnet connection A Telnet connection offers the convenience of accessing the HP 10GbE switch from any workstation connected to the network. Telnet provides the same options for user, operator, and administrator access as those available through the console port. By...
Page 12 - Accessing the switch
ISCLI reference 12 The following SSH clients are supported: • SSH 3.0.1 for Linux (freeware) • SecureCRT® 4.1.8 (VanDyke Technologies, Inc.) • OpenSSH_3.9 for Linux (FC 3) • FedoraCore 3 for SCP commands • PuTTY Release 0.58 (Simon Tatham) for Windows NOTE: The HP 10GbE switch implementation of SSH ...
Page 13 - Idle timeout
ISCLI reference 13 Table 2 User access levels User account Description and tasks performed User The User has no direct responsibility for switch management. He or she can view all switch status information and statistics, but cannot make any configuration changes to the switch. The user account is e...
Page 15 - ISCLI basics; Accessing the ISCLI; ISCLI Command Modes
ISCLI basics 15 ISCLI basics Introduction The ISCLI is used for viewing switch information and statistics. In addition, the administrator can use the CLI for performing all levels of switch configuration. This chapter describes the ISCLI Command Modes, and provides a list of commands and shortcuts t...
Page 18 - Command line interface shortcuts; Command abbreviation; Tab completion
ISCLI basics 18 Command line interface shortcuts The following shortcuts allow you to enter commands quickly and easily. Command abbreviation Most commands can be abbreviated by entering the first characters that distinguish the command from the others in the same mode. For example, consider the fol...
Page 19 - Information Commands
Information Commands 19 Information Commands Introduction You can view configuration information for the switch in the ISCLI. This chapter discusses how to use the ISCLI to display switch information. The following table describes general information commands. Table 6 Information commands Command Us...
Page 21 - SNMPv3 Information commands
Information Commands 21 SNMPv3 Information commands SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2 Framework by supporting the following: • a new SNMP message format • security for messages • access control • remote configuration of SNMP parameters For more detai...
Page 22 - SNMPv3 USM User Table information; SNMPv3 View Table information
Information Commands 22 SNMPv3 USM User Table information The following command displays SNMPv3 user information: show snmp-server v3 user Command mode: All The User-based Security Model (USM) in SNMPv3 provides security services such as authentication and privacy of messages. This security model ma...
Page 23 - SNMPv3 Access Table information
Information Commands 23 The following table describes the SNMPv3 View Table information. Table 10 View Table parameters Field Description View Name Displays the name of the view. Subtree Displays the MIB subtree as an OID string. A view subtree is the set of all MIB object instances which have a com...
Page 24 - SNMPv3 Group Table information; SNMPv3 Community Table information
Information Commands 24 SNMPv3 Group Table information The following command displays SNMPv3 group information: show snmp-server v3 group Command mode: All Sec Model User Name Group Name ---------- ----------------------------- ------------------------------- snmpv1 v1v2only v1v2grp usm adminmd5 adm...
Page 25 - SNMPv3 Target Address Table information; SNMPv3 Target Parameters Table information
Information Commands 25 SNMPv3 Target Address Table information The following command displays SNMPv3 target address information: show snmp-server v3 target-address Command mode: All Name Transport Addr Port Taglist Params ---------- --------------- ---- ---------- --------------- trap1 47.81.25.66 ...
Page 26 - SNMPv3 Notify Table information
Information Commands 26 Table 15 Target Parameters Table information Field Description Sec Model Displays the security model used when generating SNMP messages using this entry. The system may choose to return an inconsistentValue error if an attempt is made to set this variable to a value for a sec...
Page 27 - SNMPv3 dump
Information Commands 27 SNMPv3 dump The following command displays SNMPv3 information: show snmp-server v3 Command mode: All Engine ID = 80:00:07:50:03:00:0F:6A:F8:EF:00 usmUser Table: User Name Protocol -------------------------------- -------------------------------- admin NO AUTH, NO PRIVACY admi...
Page 28 - System information
Information Commands 28 System information The following command displays system information: show sys-info Command mode: All System Information at 6:56:22 Thu Jan 11, 2007 Time zone: America/US/Pacific HP 10 Gb Ethernet Blade Switch sysName: sysLocation: RackId: Default RUID RackName: Default Rack ...
Page 29 - Show recent syslog messages
Information Commands 29 Show recent syslog messages The following command displays system log messages: show logging messages Command mode: All Date Time Severity level Message ---- ---- ----------------- ------- Jul 8 17:25:41 NOTICE system: link up on port 1 Jul 8 17:25:41 NOTICE system: link up o...
Page 30 - System user information
Information Commands 30 System user information The following command displays user status information: show access user Command mode: All except User EXEC Usernames: user - enabled oper - disabled admin - Always Enabled Current User ID table: 1: name tech1 , ena, cos user , password valid, online 2...
Page 31 - Layer 2 information
Information Commands 31 Layer 2 information The following table describes the Layer 2 Information commands. The following sections provide more detailed information and commands. Table 18 Layer 2 information commands Command Usage show mac-address-table Displays Forwarding Database Information. Comm...
Page 33 - Show all FDB information; Clearing entries from the forwarding database; Link Aggregation Control Protocol information
Information Commands 33 Show all FDB information The following command displays Forwarding Database information: show mac-address-table Command mode: All MAC address VLAN Port Trnk State ----------------- ---- ---- ---- ----- 00:02:01:00:00:00 300 1 TRK 00:02:01:00:00:01 300 20 FWD 00:02:01:00:00:02...
Page 34 - LACP dump
Information Commands 34 LACP dump The following command displays LACP information: show lacp information Command mode: All >> LACP# dump port lacp adminkey operkey selected prio attached trunk aggr ---------------------------------------------------------------------- 1 off 1 1 n 32768 -- -- 2...
Page 37 - Spanning Tree information
Information Commands 37 Spanning Tree information The following table describes the Spanning Tree Protocol (STP) information commands. Table 22 STP information commands Command Usage show spanning-tree stp <1-128> Displays information about the spanning tree group. Command mode: All show spann...
Page 39 - Rapid Spanning Tree and Multiple Spanning Tree information
Information Commands 39 Rapid Spanning Tree and Multiple Spanning Tree information The following command displays RSTP/MSTP information: show spanning-tree stp <1-128> information Command mode: All ------------------------------------------------------------------ upfast disabled, update 40 --...
Page 41 - Common Internal Spanning Tree information
Information Commands 41 Table 24 Rapid Spanning Tree parameter descriptions Parameter Description Role Shows the current role of this port in the Spanning Tree. The port role can be one of the following: Designated ( DESG ), Root ( ROOT ), Alternate ( ALTN ), Backup ( BKUP ), Master ( MAST ), or Unk...
Page 43 - Trunk group information
Information Commands 43 Table 25 Common Internal Spanning Tree parameter descriptions Parameter Description Role Shows the current role of this port in the Spanning Tree. The port role can be one of the following: Designated ( DESG ), Root ( ROOT ), Alternate ( ALTN ), Backup ( BKUP ), Master ( MAST...
Page 44 - VLAN information
Information Commands 44 VLAN information The following table describes the VLAN information commands. Table 26 VLAN information commands Command Usage show vlan Displays VLAN information Command mode: All show vlan information Displays VLAN information, including spanning tree assignment. Command mo...
Page 45 - Layer 3 information
Information Commands 45 Layer 3 information The following table describes basic Layer 3 Information commands. The following sections provide more detailed information and commands. Table 27 Layer 3 information commands Command Usage show ip route Displays all routes configured in the switch. Command...
Page 46 - Route information; Show all IP Route information
Information Commands 46 Route information Using the commands listed below, you can display all or a portion of the IP routes currently held in the switch. Table 28 Route Information commands Command Usage show ip route address <IP address> Displays a single route by destination IP address. Com...
Page 48 - Show all ARP entry information
Information Commands 48 ARP information The Address Resolution Protocol (ARP) information includes IP address and MAC address of each entry, address status flags, VLAN, and port for the address, and port referencing information. The following table describes the Address Resolution Protocol commands....
Page 49 - ARP address list information; OSPF information
Information Commands 49 ARP address list information The following command displays ARP address list information: show ip arp reply Command mode: All except User EXEC IP address IP mask MAC address VLAN Flags --------------- --------------- ----------------- ---- ----- 205.178.18.66 255.255.255.255 ...
Page 50 - OSPF general information; OSPF interface information
Information Commands 50 OSPF general information The following command displays general OSPF information: show ip ospf general-information Command mode: All except User EXEC OSPF Version 2 Router ID: 10.10.10.1 Started at 1663 and the process uptime is 4626 Area Border Router: yes, AS Boundary Route...
Page 51 - OSPF Database information
Information Commands 51 OSPF Database information The following table describes the OSPF Database information commands. Table 34 OSPF Database information commands Command Usage show ip ospf database advertising-router <router ID> Takes advertising router as a parameter. Displays all the Link ...
Page 52 - OSPF route codes information
Information Commands 52 Table 34 OSPF Database information commands Command Usage show ip ospf database summary [advertising-router <router ID> | linkstate-id <A.B.C.D> | self] Displays the network summary (type 3) LSAs with detailed information of each field of the LSAs. Command mode: A...
Page 53 - Routing Information Protocol; RIP Routes information; RIP user configuration
Information Commands 53 Routing Information Protocol The following table describes the Routing Information Protocol (RIP) information commands. Table 35 RIP information commands Command Usage show ip rip routes Displays RIP routes. Command mode: All except User EXEC show ip rip interface [<1-249&...
Page 54 - IP information
Information Commands 54 IP information The following command displays Layer 3 information: show layer3 information Command mode: All IP information: Interface information: 1: 10.80.23.243 255.255.254.0 10.80.23.255, vlan 1, up 250: 10.20.7.144 255.255.0.0 10.20.255.255, vlan 4095, up Default gateway...
Page 55 - IGMP multicast group information; IGMP group information
Information Commands 55 IGMP multicast group information The following table describes the commands used to display information about IGMP groups learned by the switch. Table 36 IGMP Multicast Group commands Command Usage show ip igmp groups address <IP address> Displays a single IGMP multicas...
Page 56 - IGMP multicast router information
Information Commands 56 IGMP multicast router information The following table describes the commands used to display information about multicast routers learned through IGMP Snooping. Table 37 IGMP Multicast Router information commands Command Usage show ip igmp mrouter vlan <1-4094> Displays ...
Page 57 - VRRP information
Information Commands 57 VRRP information Virtual Router Redundancy Protocol (VRRP) support on HP 10GbE switch provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP-capable routing device. One of t...
Page 59 - ACL information
Information Commands 59 ACL information The following table describes the commands used to display information about Access Control Lists and Groups. Table 40 ACL information commands Command Usage show access-control list <1-384> Displays information about the selected ACL. Command mode: All ...
Page 60 - RMON Information; RMON history information
Information Commands 60 RMON Information The following command displays general RMON information: show rmon Command mode: All RMON history information The following command displays RMON history information: show rmon history Command mode: All RMON History group configuration: Index IFOID Interval R...
Page 61 - RMON alarm information
Information Commands 61 RMON alarm information The following command displays RMON alarm information: show rmon alarm Command mode: All RMON Alarm group configuration: Index Interval Type rLimit fLimit rEvtIdx fEvtIdx last value ----- -------- ---- -------- -------- ------- ------- ---------- 1 30 a...
Page 62 - RMON event information
Information Commands 62 Table 42 RMON Alarm Information Command Usage rEvtIdx Displays the rising alarm event index that is triggered when a rising threshold is crossed. fEvtIdx Displays the falling alarm event index that is triggered when a falling threshold is crossed. Last value Displays the last...
Page 63 - Link status information
Information Commands 63 Link status information The following command displays link information: show interface link Command mode: All except User EXEC ------------------------------------------------------------------ Port Speed Duplex Flow Ctrl Link ---- ----- -------- --TX-----RX-- ------ 1 10000...
Page 64 - Port information
Information Commands 64 Port information The following command displays port information: show interface information Command mode: All except User EXEC Port Tag RMON PVID NAME VLAN(s) ---- --- ---- ---- -------------- ------------------------------- 1 n d 1 Downlink1 1 2 n d 1 Downlink2 1 3 n d 1 Do...
Page 65 - Logical Port to GEA Port mapping; Fiber Port SFP status
Information Commands 65 Logical Port to GEA Port mapping The following command displays information about GEA ports: show geaport Command mode: All Logical Port GEA Port(0-based) GEA Unit ------------ ----------------- --------- 1 2 0 2 4 0 3 6 0 4 8 0 5 10 0 6 12 0 7 14 0 8 16 0 9 3 0 10 5 0 11 7 0...
Page 66 - Uplink Failure Detection information; Information dump
Information Commands 66 Uplink Failure Detection information The following command displays Uplink Failure Detection (UFD) information: show ufd Command mode: All except User EXEC Uplink Failure Detection: Enabled LtM status: Down Member STG STG State Link Status --------- --- ------------ ---------...
Page 67 - Statistics Commands
Statistics Commands 67 Statistics Commands Introduction You can view switch performance statistics in the user, operator, and administrator command modes. This chapter discusses how to use the ISCLI to display switch statistics. The following table describes general Statistics commands. Table 44 Sta...
Page 68 - Port Statistics
Statistics Commands 68 Port Statistics The following table describes the Port Statistics commands. The following sections provide more detailed information and commands. Table 45 Port Statistics commands Command Usage show interface port <port number> dot1x counters Displays IEEE 802.1x statis...
Page 71 - Bridging statistics
Statistics Commands 71 Table 46 802.1x statistics for port Statistics Description backendNonNakResponsesFrom Supplicant Total number of times that the state machine receives a response from the Supplicant to an initial EAP-Request, and the response is something other than EAP-NAK. Indicates that the...
Page 72 - Ethernet statistics
Statistics Commands 72 Table 47 Bridging statistics for port Statistics Description dot1TpLearnedEntryDiscards The total number of Forwarding Database entries, which have been or would have been learned, but have been discarded due to a lack of space to store them in the Forwarding Database. If this...
Page 74 - Interface statistics
Statistics Commands 74 Table 48 Ethernet statistics for port Statistics Description dot3StatsFrameTooLongs A count of frames received on a particular interface that exceeds the maximum permitted frame size. The count represented by an instance of this object is incremented when the frameTooLong stat...
Page 76 - Link statistics
Statistics Commands 76 Internet Protocol (IP) statistics Use the following command to display the interface protocol statistics of the selected port: show interface port <port number> ip-counters Command mode: All GEA IP statistics for port 1: ipInReceives : 0 ipInHeaderError: 0 ipInDiscards :...
Page 77 - Layer 2 statistics; FDB statistics
Statistics Commands 77 Layer 2 statistics The following table describes the Layer 2 statistics commands. The following sections provide more detailed information and commands. Table 52 Layer 2 Statistics commands Command Usage show mac-address-table counters Displays the Forwarding Database statisti...
Page 78 - LACP statistics
Statistics Commands 78 LACP statistics Use the following command to display Link Aggregation Control Protocol (LACP) statistics: show interface port <port number> lacp counters Command mode: All Valid LACPDUs received - 0 Valid Marker PDUs received - 0 Valid Marker Rsp PDUs received - 0 Unknow...
Page 79 - Layer 3 statistics
Statistics Commands 79 Layer 3 statistics The following table describes basic Layer 3 statistics commands. The following sections provide more detailed information and commands. Table 54 Layer 3 Statistics commands Command Usage show ip counters Displays IP statistics. Command mode: All except User ...
Page 80 - IP statistics
Statistics Commands 80 Table 54 Layer 3 Statistics commands Command Usage show ip rip counters Displays Routing Information Protocol (RIP) statistics. Command mode: All above Priv EXEC clear ip rip counters Clears Routing Information Protocol (RIP) statistics. Command mode: All above Priv EXEC show ...
Page 81 - Route statistics
Statistics Commands 81 Table 55 IP statistics Statistics Description ipInDiscards The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but which were discarded (for example, for lack of buffer space). This counter does not include any datagra...
Page 82 - ARP statistics; DNS statistics
Statistics Commands 82 ARP statistics The following command displays Address Resolution Protocol statistics. show ip arp counters Command mode: All except User EXEC ARP statistics: arpEntriesCur: 2 arpEntriesHighWater: 4 arpEntriesMax: 4095 The following table describes the Address Resolution Protoc...
Page 83 - ICMP statistics
Statistics Commands 83 ICMP statistics The following command displays ICMP statistics: show ip icmp counters Command mode: All except User EXEC ICMP statistics: icmpInMsgs: 245802 icmpInErrors: 1393 icmpInDestUnreachs: 41 icmpInTimeExcds: 0 icmpInParmProbs: 0 icmpInSrcQuenchs: 0 icmpInRedirects: 0 i...
Page 84 - TCP statistics
Statistics Commands 84 Table 59 ICMP statistics Statistics Description icmpOutErrors The number of ICMP messages that this switch did not send due to problems discovered within ICMP such as a lack of buffer. This value should not include errors discovered outside the ICMP layer such as the inability...
Page 86 - UDP statistics; IGMP Multicast Group statistics
Statistics Commands 86 UDP statistics The following command displays UDP statistics: show ip udp counters Command mode: All except User EXEC UDP statistics: udpInDatagrams: 54 udpOutDatagrams: 43 udpInErrors: 0 udpNoPorts: 1578077 The following table describes the User Datagram Protocol (UDP) statis...
Page 87 - OSPF statistics
Statistics Commands 87 Table 62 IGMP statistics Statistic Description rxIgmpGrpSpecificQueries Total number of Membership Query packets received from specific groups Total number of Group Source Specific Queries (GSSQ) received rxIgmpLeaves Total number of Leave requests received rxIgmpReports Total...
Page 88 - OSPF global statistics
Statistics Commands 88 OSPF global statistics The following command displays OSPF global statistics: show ip ospf counters general Command mode: All except User EXEC OSPF stats ---------- Rx/Tx Stats: Rx Tx -------- -------- Pkts 0 0 hello 23 518 database 4 12 ls requests 3 1 ls acks 7 7 ls updates ...
Page 91 - VRRP statistics
Statistics Commands 91 VRRP statistics Virtual Router Redundancy Protocol (VRRP) support on the HP 10GbE switch provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP-capable routing device. One of...
Page 92 - RIP statistics; GEA Layer 3 statistics
Statistics Commands 92 RIP statistics The following command displays RIP statistics: show ip rip counters Command mode: All except User EXEC RIP ALL STATS INFORMATION: RIP packets received = 12 RIP packets sent = 75 RIP request received = 0 RIP response received = 12 RIP request sent = 3 RIP respons...
Page 93 - Management Processor statistics; Packet statistics
Statistics Commands 93 Management Processor statistics The following table describes the MP-specific Statistics commands. The following sections provide more detailed information and commands. Table 67 MP-specific Statistics commands Command Usage show mp packet Displays packet statistics, to check ...
Page 95 - CPU statistics; ACL statistics
Statistics Commands 95 UDP statistics The following command displays UDP statistics: show mp udp-block Command mode: All except User EXEC All UDP allocated control blocks: 161: listen The following table describes the User Datagram Protocol (UDP) control block (UCB) statistics shown in this example:...
Page 96 - SNMP statistics
Statistics Commands 96 SNMP statistics The following command displays SNMP statistics: show snmp-server counters Command mode: All except User EXEC SNMP statistics: snmpInPkts: 54 snmpInBadVersions: 0 snmpInBadC'tyNames: 0 snmpInBadC'tyUses: 0 snmpInASNParseErrs: 0 snmpEnableAuthTraps: 0 snmpOutPkts...
Page 98 - NTP statistics
Statistics Commands 98 Table 72 SNMP statistics Statistics Description snmpOutGetRequests The total number of SNMP Get-Request Protocol Data Units (PDUs), which have been generated by the SNMP protocol entity. snmpOutGetNexts The total number of SNMP Get-Next Protocol Data Units (PDUs), which have b...
Page 99 - Uplink Failure Detection statistics
Statistics Commands 99 Table 73 NTP statistics Statistics Description Primary Server • Requests Sent —The total number of NTP requests the switch sent to the primary NTP server to synchronize time. • Responses Received —The total number of NTP responses received from the primary NTP server. • Update...
Page 100 - Statistics dump
Statistics Commands 100 Statistics dump The following command dumps switch statistics: show counters Use the dump command to dump all switch statistics available (40K or more, depending on your configuration). This data can be used to tune or debug switch performance. If you want to capture dump dat...
Page 101 - Configuration Commands; Viewing and saving changes
Configuration Commands 101 Configuration Commands Introduction The Configuration commands are available only from an administrator login. They include commands for configuring every aspect of the HP 10GbE switch . Changes can be saved to non-volatile memory (NVRAM). The following table describes the...
Page 102 - System configuration
Configuration Commands 102 System configuration These commands allow you to configure switch management parameters such as user and administrator privilege mode passwords, browser-based management settings, and management access list. The following table describes the System Configuration commands. ...
Page 103 - System host log configuration
Configuration Commands 103 Table 76 System Configuration commands Command Usage [no] enable <string> Allows administrators to assign the Privilege EXEC password. The password will be required to enter Privilege EXEC mode. The default value is disabled . Command mode: Global configuration show ...
Page 105 - Secure Shell Server configuration
Configuration Commands 105 Secure Shell Server configuration Telnet traffic on the network is not secure. These commands enable Secure Shell (SSH) access from any SSH client. The SSH program securely logs into another computer over a network and executes commands in a secure environment. All data us...
Page 106 - RADIUS server configuration
Configuration Commands 106 Table 78 SSHD Configuration commands Command Description no ssh enable Disables the SSH server. This is the default for the SSH server. Command mode: Global configuration show ssh Displays the current SSH server configuration. Command mode: All RADIUS server configuration ...
Page 107 - TACACS+ server configuration
Configuration Commands 107 Table 79 RADIUS Server Configuration commands Command Description no radius-server enable Disables the RADIUS server. This is the default. Command mode: Global configuration show radius-server Displays the current RADIUS server parameters. Command mode: All IMPORTANT: If R...
Page 109 - NTP server configuration
Configuration Commands 109 and use the administrator password to log into the switch. The switch allows this only if TACACS+ servers are not available. NTP server configuration These commands enable you to synchronize the switch clock to a Network Time Protocol (NTP) server. By default, this option ...
Page 110 - System SNMP configuration
Configuration Commands 110 System SNMP configuration The switch software supports SNMP-based network management. In SNMP model of network management, a management station (client/manager) accesses a set of variables known as MIBs (Management Information Base) provided by the managed device (agent). ...
Page 111 - SNMPv3 configuration
Configuration Commands 111 Table 82 System SNMP Configuration commands Command Description snmp-server timeout <1-30> Sets the timeout value for the SNMP state machine. The range is 1-30 minutes. The default value is 5 minutes. Command mode: Global configuration [no] snmp-server authentication...
Page 113 - User Security Model configuration
Configuration Commands 113 User Security Model configuration You can make use of a defined set of user identities using this Security Model. An SNMP engine must have the knowledge of applicable attributes of a user. These commands help you create a user security model entry for an authorized user. Y...
Page 114 - SNMPv3 View configuration; View-based Access Control Model configuration
Configuration Commands 114 SNMPv3 View configuration The following table describes the SNMPv3 View Configuration commands. Table 85 SNMPv3 View Configuration commands Command Description snmp-server view <1-128> name <1-32 characters> Defines the name for a family of view subtrees up to ...
Page 115 - SNMPv3 Group configuration
Configuration Commands 115 Table 86 View-based Access Control Configuration commands Command Description snmp-server access <1-32> level {noAuthNoPriv|authNo-Priv|authPriv} Defines the minimum level of security required to gain access rights. The level noAuthNoPriv means that the SNMP message ...
Page 116 - SNMPv3 Community Table configuration; SNMPv3 Target Address Table configuration
Configuration Commands 116 Table 87 SNMPv3 Group Configuration commands Command Description show snmp-server group <1-16> Displays the current vacmSecurityToGroup configuration. Command mode: All SNMPv3 Community Table configuration These commands are used for configuring the community table e...
Page 117 - SNMPv3 Target Parameters Table configuration
Configuration Commands 117 Table 89 SNMPv3 Target Address Table Configuration commands Command Description snmp-server target-address <1-16> name <1-32 characters> address <transport IP address> Configures a transport address IP that can be used in the generation of SNMP traps. Com...
Page 118 - SNMPv3 Notify Table configuration
Configuration Commands 118 Table 90 SNMPv3 Target Parameters Table Configuration commands Command Description snmp-server target-parameters <1-16> level {noAuthNo-Priv|authNoPriv|authPriv} Selects the level of security to be used when generating the SNMP messages using this entry. The level no...
Page 119 - System Access configuration; Management Networks configuration
Configuration Commands 119 System Access configuration The following table describes the System Access Configuration commands. Table 92 System Access Configuration commands Command Description [no] access http enable Enables or disables HTTP (Web) access to the Browser-based Interface. It is enabled...
Page 120 - User Access Control configuration; User ID configuration
Configuration Commands 120 Table 93 Management Networks Configuration commands Command Description clear access management-network Clears the management network definitions. Command mode: All except User EXEC User Access Control configuration The following table describes the User Access Control com...
Page 122 - HTTPS Access configuration
Configuration Commands 122 HTTPS Access configuration The following table describes the HTTPS Access Configuration commands. Table 96 HTTPS Access Configuration commands Command Description [no] access https enable Enables or disables BBI access (Web access) using HTTPS. The default value is disable...
Page 123 - Port configuration
Configuration Commands 123 Port configuration Use the port configuration commands to configure settings for individual switch ports. NOTE: Port 17 is reserved for switch management. The following table describes the Port Configuration commands. The following sections provide more detailed informatio...
Page 124 - Temporarily disabling a port; Port link configuration
Configuration Commands 124 Table 97 Port Configuration commands Command Description shutdown Disables the port. To temporarily disable a port without changing its configuration attributes, see the “Temporarily disabling a port” section later in this chapter. Command mode: Interface port show interfa...
Page 125 - ACL Port configuration
Configuration Commands 125 Table 98 Gigabit Link Configuration commands Command Description no flowcontrol Sets the flow control to none. Command mode: Interface port [no] auto Enables or disables auto-negotiation for the port. All downlink and uplink ports are fixed at 10000 Mbps, and cannot be set...
Page 126 - Layer 2 configuration
Configuration Commands 126 Layer 2 configuration The following table describes the Layer 2 Configuration commands. The following sections provide more detailed information and commands. Table 100 Layer 2 Configuration commands Command Description vlan {<1-4094>} Enter VLAN configuration mode. ...
Page 127 - x Global configuration
Configuration Commands 127 802.1x Global configuration The global 802.1x commands allow you to configure parameters that affect all ports in the switch (except management port 17). The following table describes the 802.1x Global Configuration commands. Table 102 802.1x Global Configuration commands ...
Page 128 - x Port configuration
Configuration Commands 128 Table 102 802.1x Global Configuration commands Command Description show dot1x Displays current global 802.1x parameters. Command mode: All 802.1x Port configuration The 802.1x port commands allow you to configure parameters that affect the selected port in the switch. Thes...
Page 129 - Rapid Spanning Tree Protocol /
Configuration Commands 129 Table 103 802.1x Port Configuration commands Command Description dot1x re-authentication-interval {<1-604800>} Sets the time, in seconds, the authenticator waits before re- authenticating a supplicant (client) when periodic re-authentication is enabled. The default v...
Page 131 - Common Internal Spanning Tree configuration; CIST bridge configuration
Configuration Commands 131 Common Internal Spanning Tree configuration The Common Internal Spanning Tree (CIST) provides compatibility with different MSTP regions and with devices running different Spanning Tree instances. It is equivalent to Spanning Tree Group 0. The following table describes the ...
Page 132 - CIST port configuration
Configuration Commands 132 Table 106 CIST Bridge Configuration commands Command Description spanning-tree mstp cist-bridge forward-delay {<4-30>} Configures the CIST bridge forward delay parameter. The forward delay parameter specifies the amount of time that a bridge port has to wait before i...
Page 134 - Spanning Tree configuration
Configuration Commands 134 Spanning Tree configuration The switch supports the IEEE 802.1d Spanning Tree Protocol (STP) and Cisco proprietary PVST and PVST+ protocols. You can configure up to 127 spanning tree groups on the switch (STG 128 is reserved for switch management). Spanning Tree is turned ...
Page 135 - Bridge Spanning Tree configuration
Configuration Commands 135 Bridge Spanning Tree configuration Spanning tree bridge parameters can be configured for each Spanning Tree Group. STP bridge parameters include: • Bridge priority • Bridge hello time • Bridge maximum age • Forwarding delay • Current bridge configuration The following tabl...
Page 136 - Spanning Tree port configuration
Configuration Commands 136 When configuring STP bridge parameters, the following formulas must be used: • 2*( fwd -1) ≥ mxage • 2*( hello +1) ≤ mxage Spanning Tree port configuration The default configuration for STP/PVST+ is off for downlink ports (1-16) and the management port (17), and on for upl...
Page 137 - Forwarding Database configuration; Static FDB configuration
Configuration Commands 137 Table 110 Spanning Tree Port Configuration commands Command Description [no] spanning-tree stp {<1-128>} edge Enables or disables this port as an edge port. An edge port is not connected to a bridge, and can begin forwarding traffic as soon as the link is up. Configu...
Page 138 - Trunk configuration
Configuration Commands 138 Table 112 Static FDB Configuration commands Command Description mac-address-table static all [<interface>|<VLAN>|<port>] Clears specified static FDB entries from the forwarding database, as follows: • Interface • MAC address • VLAN Command mode: Global co...
Page 139 - Layer 2 IP Trunk Hash configuration
Configuration Commands 139 Layer 2 IP Trunk Hash configuration Trunk hash parameters are set globally for the HP 10GbE switch. You can enable one or two parameters, to configure any of the following valid combinations: • SMAC (source MAC only) • DMAC (destination MAC only) • SIP (source IP only) • D...
Page 140 - Link Aggregation Control Protocol configuration; LACP Port configuration
Configuration Commands 140 Link Aggregation Control Protocol configuration The following table describes the LACP Configuration commands. Table 115 LACP Configuration commands Command Description lacp system-priority {<1-65535>} Defines the priority value (1 through 65535) for the switch. Lowe...
Page 141 - VLAN configuration
Configuration Commands 141 VLAN configuration The commands in this section configure VLAN attributes, change the status of the VLAN, delete the VLAN, and change the port membership of the VLAN. By default, the VLANs are disabled except VLAN 1, which is always enabled. The switch supports a maximum o...
Page 142 - Layer 3 configuration; IP interface configuration
Configuration Commands 142 Layer 3 configuration The following table describes basic Layer 3 Configuration commands. The following sections provide more detailed information and commands. Table 118 L3 Configuration commands Command Description interface ip {<1-250>} Enter IP Interface mode. Co...
Page 143 - Default Gateway configuration
Configuration Commands 143 Table 119 IP Interface Configuration commands Command Description no enable Disables this IP interface. Command mode: Interface IP no interface ip {<1-250>} Removes this IP interface. Command mode: Global configuration show interface ip {<1-250>} Displays the c...
Page 144 - IP Static Route configuration; Address Resolution Protocol configuration
Configuration Commands 144 IP Static Route configuration The following table describes the Static Route Configuration commands. Table 121 Static Route Configuration commands Command Description ip route <IP subnet> <IP netmask> <IP nexthop> [<IP interface (1-250)>] Adds a sta...
Page 145 - Static ARP configuration
Configuration Commands 145 Static ARP configuration Static ARP entries are permanent in the ARP cache and do not age out like the ARP entries that are learnt dynamically. Static ARP entries enable the switch to reach the hosts without sending an ARP broadcast request to the network. Static ARPs are ...
Page 146 - IP Forwarding configuration; Network Filter configuration
Configuration Commands 146 IP Forwarding configuration The following table describes the IP Forwarding Configuration commands. Table 124 IP Forwarding Configuration commands Command Description [no] ip routing direct-broadcasts Enables or disables forwarding directed broadcasts. This command is disa...
Page 147 - Route Map configuration
Configuration Commands 147 Route Map configuration Routing maps control and modify routing information. The map number <1-32> represents the routing map you wish to configure. The following table describes the basic Route Map Configuration commands. The following sections provide more detailed...
Page 148 - IP Access List configuration; Routing Information Protocol configuration
Configuration Commands 148 IP Access List configuration The route map number <1-32> and the access list number <1-8> represent the IP access list you wish to configure. The following table describes the IP Access List Configuration commands. Table 127 IP Access List Configuration command...
Page 149 - RIP Interface configuration
Configuration Commands 149 RIP Interface configuration The RIP commands are used for configuring Routing Information Protocol parameters. This option is turned off by default. NOTE: Do not configure RIP version 1 parameters if your routing equipment uses RIP version 2. The following table describes ...
Page 150 - RIP Route Redistribution configuration
Configuration Commands 150 Table 129 RIP Interface Configuration commands Command Description ip rip authentication key {<password>} Configures the authentication key password. Command mode: Interface IP ip rip enable Enables this RIP interface. Command mode: Interface IP no ip rip enable Disa...
Page 151 - Open Shortest Path First configuration
Configuration Commands 151 Open Shortest Path First configuration The following table describes the basic Open Shortest Path First (OSPF) commands. The following sections provide more detailed information and commands. Table 131 OSPF Configuration commands Command Description router ospf Enter Route...
Page 152 - OSFP Area Index configuration
Configuration Commands 152 OSFP Area Index configuration The following table describes the Area Index Configuration commands. Table 132 OSPF Area Index Configuration commands Command Description area <0-2> area-id <A.B.C.D> Defines the area ID of the OSPF area number. Command mode: Route...
Page 153 - OSPF Summary Range configuration
Configuration Commands 153 Table 132 OSPF Area Index Configuration commands Command Description show ip ospf area <0-2> Displays the current OSPF configuration. Command mode: All except User EXEC OSPF Summary Range configuration The following table describes the OSPF Summary Range Configuratio...
Page 154 - OSPF Interface configuration
Configuration Commands 154 OSPF Interface configuration The following table describes the OSPF Interface Configuration commands. Table 134 OSPF Interface Configuration commands Command Description ip ospf area <0-2> Configures the OSPF area index. Command mode: Interface IP ip ospf priority &l...
Page 155 - OSPF Virtual Link configuration
Configuration Commands 155 OSPF Virtual Link configuration The following table describes the OSPF Virtual Link Configuration commands. Table 135 OSPF Virtual Link Configuration commands Command Description area-virtual-link <1-3> area <0-2> Configures the OSPF area index. Command mode: R...
Page 156 - OSPF Host Entry configuration; OSPF Route Redistribution configuration
Configuration Commands 156 OSPF Host Entry configuration The following table describes the OSPF Host Entry Configuration commands. Table 136 OSPF Host Entry Configuration commands Command Description host <1-128> address <IP address> Configures the base IP address for the host entry. Com...
Page 157 - OSPF MD5 Key configuration; IGMP configuration; IGMP Snooping configuration
Configuration Commands 157 OSPF MD5 Key configuration The following table describes the OSPF MD5 Key Configuration commands. Table 138 OSPF MD5 Key Configuration commands Command Description message-digest-key <1-255> md5-key <key string> Sets the authentication key for this OSPF packet....
Page 158 - IGMPv3 Snooping configuration
Configuration Commands 158 Table 139 IGMP Snooping commands Command Description [no] ip igmp snoop flood Configures the switch to flood unregistered IP multicast reports to all ports. Command mode: Global configuration [no] ip igmp snoop aggregate Enables or disables IGMP Membership Report aggregati...
Page 160 - IGMP static multicast router configuration; IGMP filtering configuration
Configuration Commands 160 IGMP static multicast router configuration The following table describes the Static Multicast Router Configuration commands. NOTE: When you configure a static multicast router on a VLAN, the process of learning multicast routers is disabled for that VLAN. Table 141 IGMP St...
Page 161 - IGMP filter definition; IGMP filtering port configuration
Configuration Commands 161 IGMP filter definition The following table describes the IGMP Filter Definition commands. Table 143 IGMP Filter Definition commands Command Description ip igmp profile <1-16> range <IP multicast address> <IP multicast address> Configures the range of IP m...
Page 162 - Domain Name System configuration; Bootstrap Protocol Relay configuration
Configuration Commands 162 Domain Name System configuration The Domain Name System (DNS) Configuration commands are used for defining the primary and secondary DNS servers on your local network, and for setting the default domain name served by the switch services. DNS parameters must be configured ...
Page 163 - Virtual Router Redundancy Protocol configuration
Configuration Commands 163 Virtual Router Redundancy Protocol configuration Virtual Router Redundancy Protocol (VRRP) support on the HP 10GbE switch provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participatin...
Page 164 - VRRP Virtual Router configuration
Configuration Commands 164 VRRP Virtual Router configuration Virtual Router commands are used for configuring virtual routers for this switch. A virtual router is defined by its virtual router ID and an IP address. On each VRRP-capable routing device participating in redundancy for this virtual rout...
Page 165 - VRRP Virtual Router Priority Tracking configuration
Configuration Commands 165 Table 148 Virtual Router Configuration commands Command Description [no] virtual-router <1-250> preemption Enables or disables master preemption. When enabled, if this virtual router is in backup mode but has a higher priority than the current master, this virtual ro...
Page 166 - VRRP Virtual Router Group configuration
Configuration Commands 166 Table 149 Virtual Router Priority Tracking Configuration commands Command Description [no] virtual-router <1-250> track interfaces When enabled, the priority for this virtual router will be increased for each other IP interface active on this switch. An IP interface ...
Page 167 - VRRP Virtual Router Group Priority Tracking configuration
Configuration Commands 167 Table 150 Virtual Router Group Configuration commands Command Description group advertisement <1-255> Defines the time interval between VRRP master advertisements. This can be any integer between 1 and 255 seconds. The default is 1. Command mode: Router VRRP [no] gro...
Page 168 - VRRP Interface configuration; VRRP Tracking configuration
Configuration Commands 168 VRRP Interface configuration These commands are used for configuring VRRP authentication parameters for the IP interfaces used with the virtual routers. The interface number represents the IP interface on which authentication parameters must be configured. The following ta...
Page 170 - Quality of Service configuration
Configuration Commands 170 Quality of Service configuration Use the Quality of Service (QoS) commands to configure the IEEE 802.1p priority value of incoming packets. This allows you to differentiate between various types of traffic, and provide different priority levels. QoS 802.1p configuration Th...
Page 171 - Access Control configuration; Access Control List configuration; ACL Ethernet Filter configuration
Configuration Commands 171 Access Control configuration Use these commands to create Access Control Lists (ACLs) and ACL Groups. ACLs define matching criteria used for IP filtering and Quality of Service functions. Access Control List configuration These commands allow you to define filtering criter...
Page 172 - ACL IP Version 4 Filter configuration
Configuration Commands 172 Table 156 Ethernet Filter Configuration commands Command Description access-control list <1-384> ethernet ethernet-type {ARP|IP|IPv6|MPLS| RARP|any|0xXXXX} Defines the Ethernet type for this ACL. Command mode: Global configuration access-control list <1-384> et...
Page 173 - ACL TCP/UDP Filter configuration
Configuration Commands 173 ACL TCP/UDP Filter configuration These commands allow you to define TCP/UDP matching criteria for an ACL. The following table describes the TCP/UDP Filter Configuration commands. Table 158 TCP/UDP Filter Configuration commands Command Description access-control list <1-...
Page 174 - ACL Packet Format configuration; ACL Metering configuration
Configuration Commands 174 ACL Packet Format configuration The following table describes the Packet Format Configuration commands. Table 159 Packet Format Configuration commands Command Description access-control list <1-384> packet-format ethernet {ethertype2|snap|llc} Defines the Ethernet fo...
Page 175 - ACL Re-mark configuration
Configuration Commands 175 ACL Re-mark configuration You can choose to re-mark IP header data for the selected ACL. You can configure different re-mark values, based on whether packets fall within the ACL Metering profile, or out of the ACL Metering profile. The following table describes the ACL Re-...
Page 176 - Re-Mark Update User Priority configuration
Configuration Commands 176 Re-Mark Update User Priority configuration The following table describes the Update User Priority Configuration commands. Table 163 ACL Update User Priority Configuration commands Command Description access-control list <1-384> re-mark in-profile dot1p <0-7> De...
Page 177 - ACL Group configuration
Configuration Commands 177 ACL Group configuration These commands allow you to compile one or more ACLs into an ACL Group. Once you create an ACL Group, you can assign the ACL Group to one or more ports. The following table describes the ACL Group Configuration commands. Table 165 ACL Group Configur...
Page 178 - Remote Monitoring configuration; RMON history configuration
Configuration Commands 178 Remote Monitoring configuration Remote Monitoring (RMON) allows you to monitor traffic flowing through the switch. The RMON MIB is described in RFC 1757. The following table describes the basic RMON Configuration commands. The following sections provide more detailed comma...
Page 179 - RMON event configuration
Configuration Commands 179 RMON event configuration The following table describes the RMON Event commands. Table 168 RMON Event commands Command Description rmon event <1-65535> description <1-127 characters> Enter a text string to describe the event. The description can have a maximum o...
Page 180 - RMON alarm configuration
Configuration Commands 180 RMON alarm configuration The Alarm RMON group can track rising or falling values for a MIB object. The MIB object must be a counter, gauge, integer, or time interval. Each alarm index must correspond to an event index that triggers once the alarm threshold is crossed. The ...
Page 181 - Port mirroring
Configuration Commands 181 Table 169 RMON Alarm commands Command Description rmon alarm <1-65535> owner <1-127 characters> Enter a text string that identifies the person or entity that uses this alarm index. The owner can have a maximum of 127 characters. Command mode: Global configurati...
Page 182 - Port-based port mirroring; Uplink Failure Detection configuration
Configuration Commands 182 Port-based port mirroring The following table describes the port-based Port Mirroring Configuration commands. Table 171 Port Mirroring Configuration commands Command Description port-mirroring monitor-port <port number> mirroring-port <port number> {in|out|both...
Page 183 - Failure Detection Pair configuration; Link to Monitor configuration
Configuration Commands 183 Failure Detection Pair configuration Use these commands to configure a Failure Detection Pair, which consists of one Link to Monitor (LtM) and one Link to Disable (LtD). When the switch detects a failure on the LtM, it automatically disables the ports in the LtD. The follo...
Page 184 - Link to Disable configuration; Configuration Dump
Configuration Commands 184 Link to Disable configuration The following table describes the Link to Disable (LtD) commands. The LtD can consist of any mix of downlink ports (ports 1-16) and trunk groups that contain only downlink ports. Table 175 Link to Disable commands Command Description ufd fdp l...
Page 186 - Operations Commands; Operations-level port options
Operations Commands 186 Operations Commands Introduction Operations-level commands are used for making immediate and temporary changes to switch configuration. Operations commands are used for bringing ports temporarily in and out of service. These commands are available only from an administrator a...
Page 187 - Operations-level VRRP options
Operations Commands 187 Operations-level port 802.1x options Operations-level port 802.1x options are used to temporarily set 802.1x parameters for a port. Table 178 Operations-Level Port 802.1x commands Command Description interface port <port number> dot1x init Re-initializes the 802.1x acce...
Page 188 - Boot Options; Downloading new software to the switch
Boot Options 188 Boot Options Introduction You must be logged in to the switch as the administrator to use the Boot Options commands. The Boot Options allow you to perform the following functions: • Select a switch software image to be used when the switch is next reloaded. • Select a configuration ...
Page 190 - Selecting a software image to run; Uploading a software image from the switch
Boot Options 190 Selecting a software image to run You can select which software image ( image1 or image2 ) you want to run in switch memory for the next reboot. 1. In Global Configuration mode, enter: Router(config)# boot image {image1|image2} 2. Enter the name of the image you want the switch to u...
Page 191 - Selecting a configuration block; Resetting the switch; Accessing the AOS CLI
Boot Options 191 Selecting a configuration block When you make configuration changes to the switch, you must save the changes so that they are retained beyond the next time the switch is reset. When you execute a save operation ( copy running-config startup-config ), your new configuration changes a...
Page 192 - Maintenance Commands; System maintenance
Maintenance Commands 192 Maintenance Commands Introduction The Maintenance commands are used for debugging purposes, enabling you to generate a technical support dump of the critical state information in the switch, and to clear entries in the Forwarding Database and the Address Resolution Protocol ...
Page 193 - Forwarding Database maintenance; Debugging options
Maintenance Commands 193 Forwarding Database maintenance The Forwarding Database (FDB) Manipulation commands can be used to view information and to delete a MAC address from the Forwarding Database or clear the entire Forwarding Database. This is helpful in identifying problems associated with MAC a...
Page 194 - ARP cache maintenance; IGMP Snooping maintenance
Maintenance Commands 194 Table 182 Miscellaneous Debug commands Command Usage debug mp-snap Displays the management processor snap (or post-mortem) trace buffer. This buffer contains information traced at the time that a reset occurred. Command mode: All except User EXEC clear flash-config Deletes a...
Page 195 - IGMP Mrouter maintenance; Uuencode flash dump
Maintenance Commands 195 Table 184 IGMP Snooping Maintenance commands Command Usage show ip igmp groups interface <port number> Shows IGMP Multicast groups on a single port. Command mode: All except User EXEC show ip igmp groups Shows all IGMP Multicast groups. Command mode: All except User EX...
Page 196 - FTP/TFTP system dump put; Clearing dump information
Maintenance Commands 196 To access dump information, at the prompt, enter: Switch# show flash-dump-uuencode The dump information is displayed on your screen and, if you have configured your communication software to do so, captured to a file. If the dump region is empty, the following displays: No F...
Page 197 - Panic command; Unscheduled system dumps
Maintenance Commands 197 Panic command The panic command causes the switch to dump state information immediately to flash memory and reboot. To select panic, at the prompt, enter: >> Switch# debug panic A FLASH dump already exists. Confirm replacing existing dump and reboot [y/n]: Enter y to c...
Page 198 - Index
Index 198 Index 8 802.1x information, 35 802.1x statistics, 69 A abbreviating commands, 18 access control, user, 116 active configuration block, 101, 191 active switch configuration: gtcfg, 185; ptcfg, 185; restoring, 185 Address Resolution Protocol (ARP): address list, 194 Address Resolution Protoc...